This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File:                     ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier:          wEqLZ1WDMvyg/vNA9SyCPEi+30cqGSzcc7OghyJaYPc=
Subject key identifier:   D6:6B:F2:30:B1:10:7D:60:E5:8B:B3:EF:54:5D:6C:63:32:B3:78:3C
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer:       /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial:       019C2661BF2A7D02565FEF41E080A9F19507
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number:          1806
Signing time:             Wed 04 Feb 2026 02:01:05 +0000
Manifest this update:     Wed 04 Feb 2026 02:01:05 +0000
Manifest next update:     Thu 05 Feb 2026 02:01:05 +0000
Files and hashes:         1: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: ayCKIxCr1fryQUidiiOATXqEqbhgkGbsi2TuMe6HMcU=)
                          2: x4lZLHx409i9ASlNHPyjDZiZaGI.roa (hash: 4B5GMEiwywVOE0OWSZpjZtJiJ2JFSDQmiE9yfVRIDfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:26:61:bf:2a:7d:02:56:5f:ef:41:e0:80:a9:f1:95:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
        Validity
            Not Before: Feb  4 02:01:05 2026 GMT
            Not After : Feb  5 02:01:05 2026 GMT
        Subject: CN=d66bf230b1107d60e58bb3ef545d6c6332b3783c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:37:c9:ca:e0:d7:c0:7d:c1:24:1a:72:b4:c5:
                    ba:f3:e7:48:50:7a:6e:d6:91:ce:14:d2:5f:d0:4c:
                    4e:ac:1e:13:f4:a7:10:ae:4b:4d:33:d6:12:66:49:
                    48:c1:66:3c:e2:4c:fa:bc:ce:89:13:82:88:52:77:
                    61:8c:58:16:0e:1d:8a:98:8a:e3:e5:7b:33:e5:10:
                    94:49:63:2b:06:46:72:e2:f3:30:59:cd:02:0c:55:
                    74:bc:63:14:d5:3a:d4:23:35:fa:7d:b3:82:23:c9:
                    67:b5:0d:2a:21:71:0e:51:d2:be:86:ac:ca:c4:b8:
                    06:a2:25:dd:81:4f:ab:25:00:30:f1:42:82:3b:1a:
                    9f:50:17:41:18:34:d2:9a:6d:2e:83:f9:62:b9:0b:
                    2d:6c:98:fa:22:33:eb:c7:77:5d:9e:be:11:a9:69:
                    25:ef:f1:aa:f8:fe:52:40:c6:9e:38:8c:c0:5f:84:
                    0a:59:b1:17:e0:15:e2:e7:9f:04:78:94:2f:b4:f0:
                    a5:d5:17:ae:71:36:05:74:06:33:ac:e3:ec:7b:ee:
                    09:81:db:b1:2a:bc:90:ec:75:bb:36:97:d1:0f:fe:
                    ba:67:cd:43:65:cc:e2:2b:40:64:af:32:ce:fa:bf:
                    2b:e6:0b:47:f8:08:6d:78:31:40:aa:5c:d9:3d:9a:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6B:F2:30:B1:10:7D:60:E5:8B:B3:EF:54:5D:6C:63:32:B3:78:3C
            X509v3 Authority Key Identifier:
                keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:4a:13:2c:23:98:83:1c:52:ff:27:48:9c:7f:db:07:e8:9e:
         28:42:0a:7a:b7:47:0e:18:71:26:b2:72:18:fc:d6:4d:e7:4a:
         22:da:e8:5b:d5:fa:55:a8:29:15:07:ee:4b:ba:40:48:91:91:
         02:e3:0f:13:15:5e:ea:1a:55:82:fe:ca:e5:bb:ac:d0:04:d7:
         7f:0b:c8:66:1e:9d:82:15:35:6c:b2:99:27:ab:3a:8c:44:8e:
         e0:66:ff:9b:ee:ae:73:76:65:72:74:ea:bb:d1:b5:e0:72:2e:
         0f:e8:af:6e:8b:f1:69:6a:b9:2e:c5:67:3d:9f:e6:d2:67:7d:
         dd:e9:90:fd:09:f3:58:d2:b8:fe:33:a1:39:95:07:89:41:05:
         eb:dd:94:fa:78:00:61:32:c8:37:eb:c8:0f:a4:48:7c:89:bd:
         af:8c:ac:77:bd:73:d8:13:c6:53:49:48:9e:bc:59:b8:c4:b1:
         9e:11:cb:ed:42:ec:c7:46:df:ce:7d:95:49:d0:64:dc:c4:76:
         86:3e:26:b5:2c:a3:a3:1b:5b:73:f3:d8:44:82:12:c3:97:92:
         fe:b7:19:29:0d:65:72:8e:48:3e:25:12:44:be:d1:53:b5:6f:
         a7:2b:ff:b9:bf:bc:95:fa:1b:e8:5b:3a:33:c4:23:36:71:07:
         c2:24:61:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 08:31:30 2026 by rpki-client